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A modified four-state CVQKD protocol is proposed to increase the maximum transmission distance and 
tolerable excess noise in the presence of Gaussian lossy and noisy channel by using a noiseless linear amplifier 
(NLA). We show that a NLA with gain g can increase the maximum admission losses by 20 log^ g dB. 
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I. INTRODUCTION 

Quantum key distribution (QKD) provides a means of shar- 
ing a secret key between two parties (Alice and Bob) se- 
curely in the presence of an eavesdropper (Eve) iHI^. The 
single-photon (e. g. BB84 Isf]), entanglement-based (e. g. 
E91 |4]) and continuous variable (e. g. GG02 fs*]) QKD 
protocols have proved to be unconditionally secure under 
some (e. g. source, detection, and post-processing) assump- 
tions |T1. In the continuous-variable QKD (CVQKD) pro- 
tocols, information is encoded in quadratures of coherent or 
squeezed states, and decoded by homodyne or heterodyne de- 
tections (3^, which have the advantage of only requiring 
off-the-shelf telecom components |9]. Besides experimental 
demonstrations IToi [Till , the theoretical security of CVQKD 
has been established against general collective Gaussian at- 
tacks lfT2l - [T5|^ which has been shown optimal in the asymp- 
totical limit 1 16]. Furthermore, the effect of finite size has 
been recently investigated in CVQKD protocol iflTl - fTgll . 

Developing QKD protocol resistant to loss and noise is of 
great practical importance. The CVQKD protocol based on 
Gaussian modulation of coherent state has been proven to be 
technically practical |9]. However, due to the low reconcili- 
ation efficiency for correlated Gaussian variables at low SNR 
(signal to noise ration), the maximum transmission distance of 
CVQKD is quite limited jTlll . There are two possible ways to 
solve this problem. One is to build good reconciliation algo- 
rithms with reasonable efficiency even at low SNR for Gaus- 
sian modulation protocols, where steady progress has been 
made in recen t years 120(1 . The other is to use discrete modula- 
tion CVQKD 1I21I424I1 . such as the four-state protocol |22, 23], 
which has been proved to be secure against collective attacks 
and have large enough reconciliation efficiency at low SNR. 

Recently, it is very interesting to see that one can improve 
the maximum transmission distance of Gaussian modulation 
CVQKD protocols dramatically by using a nondeterministic 
noiseless linear amplifier (NLA) 02511 . Lately, a method was 
proposed to improve the secret key rate of four-state CVQKD 
protocol over long distance by using a phase-sensitive or 
phase-insensitive optical amplifier, while the maximum trans- 
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mission distance is decreased fl^. Inspired by the methods 
in ]25], we show that the maximum transmission distance and 
tolerable excess noise of the four-state CVQKD protocol can 
be increased by using a NLA before Bob's detection in the 
presence of a lossy and noisy Gaussian channel. Similar to the 
result in ]25], we find that a NLA with gain g can increase the 
maximum admissible losses by a factor of g^^. Because of the 
nondeterministic nature of the NLA, the security proof here is 
similar to that in CVQKD protocols with post-selection. 



II. THE FOUR-STATE CVQKD PROTOCOL 

In this section, we firstly describe the prepare-and-measure 
(PM) and entanglement-based (EB) version of the four-state 
CVQKD protocol. Then, the secure key rate for the protocol 
under collective attack is given in detail. 



A. The PM and EB description of four-state CVQKD protocol 

In the PM version of the four-state CVQKD proto- 
col ll22ll . Alice sends randomly one of the four coherent 
states = |cKe''^<2t+i)/4^ ^ ^ ^ q, 1, 2, 3} with probability 1/4 
to Bob through a quantum channel, where a is chosen to be 
a real positive number Bob measures randomly one of the 
quadratures in homodyne detection, and decodes the informa- 
tion by the sign of his measurement result. 

The PM version of the four-state CVQKD protocol can be 
reformulated in EB version. Alice initially prepare a two- 
mode entangled state 

where 

1 3 

l^k) = 2 Z e'™'"'' \cf>J (^ = 0, 1, 2, 3) (2) 

m=0 



2 



is a non-Gaussian orthogonal state, and 



= 



y r-n" |4« + /t) , 



-e "^[cosh(a^) ± cos(q'^)], 



-e-''"[sinh(a2) + sin(a2)]. 



Then AHce performs a projective measurement {|i/'o) {lAol, 
(^^il, |i^2) (1A2L liAs) ("Asll on mode A to project mode B on 
one of the four coherent states \ait} {k - 0, 1, 2, 3) randomly, 
which are then measured by a homodyne detector at Bob's 
side after passing through a quantum channel. 

Although the EB version does not correspond to the actual 
implementation, it is fully equivalent to the PM version from 
the a secure point of view |22, 23], and it provides a power- 
ful description of establishing security proof against collective 
attacks through the covariance matrix jab of the state before 
their respective measurements ll25ll26ll . 



B. Secure key rate of four-state CVQKD protocol 



The covariance matrix jaoBo of the state \<i>AB{o^)} is 



VI Zo-, 
Zo-. VI 



(3) 



where I = 



1 
1 



1 
-1 



and cr~ - 

is variance of quadratures for mode A and B, and 
Z 



, y = 2q'2 + 1 = + 1 



2a\Al''A-''' + a]I^A-;^^ + if + Al'%"') (4) 



reflects the correlation between mode A and mode B. After 
mode B passing through a Gaussian channel with transmit- 
tance T and equivalent excess noise at the input e, the quan- 
tum state \<^ab{o:)) turns to state pab with covariance matrix 



jABia, T, e) 



VI ylfZo-, 
ylfZo-, T{V+x)l 



(5) 



where x - "pf H- e is the equivalent total noise at the in- 
put. This matrix contains all the information needed to estab- 
lish the secret key rate for collective attacks for the four-state 
CVQKD protocol, and the lower bound of secure key rate with 
reverse reconciliation is 1I22I1 



R(a, T, e) > PhBia, T, e) - S BEia, T, e), 



(6) 



where 



lABia, T,e)^^ ^^Sz^irf ^ " 5 + SNR) (7) 

refers here to the mutual information between Alice and 
Bob 1 2?], S BE is the Holevo bound for the mutual informa- 
tion shared by Eve and Bob, and /? < 1 is the reconciliation 



efficiency (J3 > 0.8 can be reached for arbitrary low SNR in 
the four-state CVQKD protocol IHIll). As shown in fH, 
S BE is maximized when the state pab shared by Alice and 
Bob is a Gaussian state, which means S be is upper bounded 
by the same quantity computed for a Gaussian state p^^ with 
the same covariance matrix as the state pab in an EB version 
of the protocol ll23ll . Clearly, one has 



' BE 



< s 



BE 



+ G 



V2-1 



V3 - 1 



where G{x) = {x + 1) logjCl + x) + Jclogj x, and 



vi,2 = -^i(A± Va2^I^ 



(8) 



(9) 



are the symplectic eigenvalues of the covariance matrix jab 
where A = -h T^(V+xf - 2TZ^ and D = (TV^ + TVx - 
TZ^f milil.and 



V3 



ViVA + 1 



rz2 



TVa + 1+ Te 



(10) 



is the symplectic eigenvalues of jaib which corresponds to the 
covariance matrix of Alice's state given the result of Bob's ho- 
modyne measurement ll23ll . Finally, the lower bound of secure 
key rate is 

R(a, T, e) = /3lAB(a, T, e) - ^^^(q', T, e) < R(a, T, e). (11) 



III. MODIFIED FOUR-STATE CVQKD PROTOCOL BY 
USING A NLA 

Inspired by the method in |25], we propose a modified 
four-state CVQKD protocol by using a NLA as shown in 
Fig. \lla), where Alice and Bob implement the original four- 
state CVQKD protocol as usual but Bob adds a NLA before 
his homodyne detection, which is here assumed to be perfect 
for simplify of analysis as in |25]. 

A NLA can in principle probabilistic amplify the ampli- 
tude of a coherent state while retaining the initial level of 
noise |27-31]. The successful amplification can be described 
by an operator C = g", where h is the photon number operator 
When a NLA succeeds amplifying a coherent state. 



C|ff) = e- 



(12) 



where g is the amplitude gain of a NLA. In the modified four- 
state CVQKD protocol, only the events corresponding to a 
successful amplification will be used to exact a secret key, 
while the other events are aborted. Since the secure key rate of 
the protocol depends only on the covariance matrix jab, it is 
sufficient to compute it in presence of the NLA to estimate the 
lower bound of secure key rate ^(a, T, e, g) corresponding to 
successfully amplified events. 

In the following, we will analysis the performance of the 
modified four-state CVQKD protocol in two cases: (I) a lossy 
Gaussian channel without excess, where one can see directly 
the effect of the NLA; (II) a lossy and noisy Gaussian channel, 
which is a general and practical case. 
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A. Case I: Lossy Gaussian channel without excess noise (e = 0) 

After mode B passing through a lossy Gaussian channel 
with transmittance T and no excess noise (e = 0), the state 
\<i>AB) turns to \(S>\j^ = 5 TjI=q Wk) \ VTat) with covariance 
matrix 



jABia, r, e = 0) = 



VI 



(13) 



Then a NLA with gain g is added to amplify the input state at 
Bob's side on mode B, which can be described by the operator 
g" when the input state is successfully amplified. One can 
easily derive that 



and the lower bound of total secure key rate is 

Rl,{a, T, e) = P,„,,,,,^(a, T, e). 



(17) 



where Psuccess is the probability of successful amplification 
by a NLA. A direct conclusion is that a NLA with ampli- 
tude gain g can increase the maximum admissible losses of 
the four-state CVQKD protocol by a factor g'^ without excess 
noise, which is equivalent to improve the maximum transmis- 
sion distance by km, where a - 0.2dB/km for the 
fiber channel. 



B. Case II: Lossy and noisy Gaussian channel (e > 0) 



as) = 



J]\l(,,)\g^/fa,). (14) 



<:=0 



After the normalization of the output state, the successfully 
ampUfied quantum state is |<t^'^^ = i TjI={) \^k) \g Vt o't) with 
covariance matrix 



r!„(a,r,e = o) 



yi ^Jg^TZo-- 
ffZcr, g'-T(V+^)I 



(15) 



One can find that the covariance matrix 7^g(Q', T,e - 0) corre- 
sponds to successful amplification is equal to the covariance 
matrix yAsio:^ - - g^T,e^ = 0) of an equivalent sys- 
tem with \(S>ab(o:)} sent through a channel with transmittance 
rj - g^T and excess noise = 0, without using a NLA (as 
shown in Fig. 1(b)). Since the lower bound of secure key rate 
under collective attacks is completely determined by the co- 
variance matrix shared by Alice and Bob, the lower bound of 
secret key rate RHa, T,e -Q) corresponding to the successful 
amplified events is 

ma, r, e = 0) = R{a, g^T, e = 0), (16) 
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FIG. 1 : (color online) (a) Modified four-state CVQKD protocol and 
(b) virtually equivalent protocol in EB version. A state |<l)^g(Q')> sent 
through a Gaussian channel with transmittance T and excess noise 
e, followed by a successful amplification, has the same covariance 
matrix y^s than a state |0/ib(q'*)) sent through a Gaussian with trans- 
mittance r] and excess noise without the NLA. The lower bound 
of secret key rate corresponding to successful amplified events in the 
modified four-state protocol R^(a, T, e) is the same as that of the vir- 
tually equivalent protocol R{a^, rj, e*). 



After passing through a Gaussian channel with transmit- 
tance T and excess noise e, the state |<1)ab(q')) turns to pab 
with covariance matrix 



jAB(a, T, e) : 



VI ylfZo-, 

^ITZo-:, T{V 



(18) 



where the quantum state of mode B is = \(po+P\ +P2+Pi) 
with variance T{V + + e). 

The pk is the state received by Bob if he knows Alice's mea- 
surement result on mode A is k, which can be described by a 
displaced thermal state 

p, = D{Jik)p,h{A)D{-lik) = D{ ^ak)p,h{X)D(- ^ffak), (19) 

where pth(A) = (1 - A^) Yj7=o I") ^"1 ^ thermal state with 
variance 

V(A) = = 1+76 (20) 

corresponds to Bob's variance when Va - 0. Then a NLA 
with gain g is added to amplify the input state at Bob's side on 
mode B. Following the methods in llzsll . one can derive the ef- 
fect of a NLA on the displaced thermal state pit{k = 0, 1, 2, 3). 
The P-function of a thermal state with parameter A is 



PthW 



r i-A^ 
J 



\a') {a'\ da' . 



(21) 



A displacement operation D(JI) will turn a thermal state to 

-A^ 



p(P) = D(J3)p,h{A)D{ 



r\-A' 



a') {a'\ da 
(22) 



The effect of a NLA on displaced thermal state pif}) is 

■A^ 



p^(J3) = Cp(J5)C 



I 



J nA^ 



f\a'}{a'\g"da' 



nA^ 



By introducing u - ga', one gets 



[ — 



C \ e ^ 



\u) {u\ du 
u){u\du, (24) 
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FIG. 2: (color online) The maximum value of the gain of NLA 
against the losses when e = 0.02. 



where Cis a global unimportant normalization factor indepen- 
dent of the integrated variable u. The Eq. ( l24l l clearly corre- 
spond to a thermal state p,i,(gA) displaced by g i^S^i'p fi- Thus, 
the successful amplification of pk corresponds to a new dis- 
placed thermal state p^, 



I- A 



where yS^ = Vt ai. Finally, the action of the NLA on the input 
state at Bob's side introduce the transformations 



\- A?- 

yffak ^ g- ^ Vf a*, A^ ^ g^A^ 

1 - g^A^ 



(26) 



which is equivalent to 



2g r- Te 



' (27) 



2 - (g2 - l)re 2 + Te ^ 2 + Te 

In the next step, one need to consider the action of NLA 
when Bob does not know Alice's measurement result. In such 
a case, the input state of the NLA is 



1 

Pb = -^(PQ+Pl +P2 +P3), 



(28) 



with variance I +Te + TVa = + 2Ta^. The output state 
corresponding to successful amplified events on pg is 

Pb'-1{p'o+p\+pI+pD, (29) 

with variance yrpp- + '2g^{Yr^)^T . Thus, the action of 
the NLA on the input state at Bob's side introduce the trans- 
formations 



T- + 2Ta — > T— ■ -t- 2g r-^ Ta , 

1-^2 1 - g'-A^ ^ \ 1 - g^A^ I 

which can be derived from Eq. ( |27] |. 



(30) 



Now we want to find a virtual two-mode entangled state 
I'1*ab(Q'*)), sent through a channel of transmittance 77 and ex- 
cess noise without using the NLA, while share the same 
covariance matrix as 7^5(0', T, e) as shown in Fig. 1(b). The 
following conditions should be satisfied 



2-(g2-l)re 



2 + rjes 



, Te 
2 + Te 



l+rie« + 2nas^ - ^^^^^^ ■ -"^ 



\-g^X' 



■+2g^ 



1-A^ 
1 - g^A^ 



(31) 
(32) 

2 

Ta^, (33) 



where the third line can be derived by the first two lines. So, 
one only need to consider the conditions in Eqs. (|3TI ) and ( l32b . 
Remind that one always has - a for e = or g = 1, so we 
add a third condition 



(34) 



Then the solutions for Eqs. (EB, (EH, and (O is 

. 1 



[2 + (l-g2)re]2 



, = e - -(g^ - l)Te\ ^ a. (35) 



Those parameters can be interpreted as physical parameters 
of an equivalent system if they satisfy the physical meaning 
constrains < t] < 1 and e^ > 0, which require 



gm-ix{T, f ) - j -2 Vf + V4r+4r£(2+r£) 



2Te 



e>0 



which is plotted in Fig. |2l Finally, one has 



RH.a,T,e) = R(a,T],e«), 
RUa,T,e) = P,uccessEH.a,T,e). 



(36) 
(37) 



IV. NUMERICAL SIMULATION AND DISCUSSION 

In the following, the performance of the modified four-state 
protocol is compared with the original one for a given channel 
with the same transmittance T and excess noise e. The se- 
cure key rate of the original protocol is given by R{a, T, e) in 
Eq. (fTTI) . and that of modified protocol is given by R^otia, T, e) 
in Eq. (l37T i. In numerical simulations, Psuccess is assumed to 
be a constant, which is reasonable when yS < 1 l|25tl . The pre- 
cise value of Psuccess depends on practical implementations. 
However, it is not not important for our result, since it only 
acts as a scaling factor of Rf„,(a, T, e) and does not change the 
fact that a negative secret rate R{a, T, e) can become positive 
Rljiia, T, £} with a NLA for a certain distance of transmis- 
sion distance. As shown in ll25ll . the value of Psuccess is upper 



bounded by 1 /g , and we choose the value 



optimize the performance of the modified four-state CVQKD 
protocol. 

The numerical simulations of R%,{a, T, e) and R(a, T, e) 
with the same channel parameters T and e is shown in Fig.|3] 
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FIG. 3: (color online) (a). The lower bound of secret key rate for the modified four-state CVQKD protocol with a NLA R^„,(a, T, e) and that of 
the original protocol without a NLA R(a, T, e) against the transmission distance in km. (b). The lower bound of secret key rate for the modified 
four-state CVQKD protocol with a NLA Rn,{a, T, e) and that of the original protocol without a NLA R{a, T, e) against the losses in dB. In the 

simulations, Va = 2a^ = 0.25, e = 0.002, y(3 = 0.8, g = 4, and P,,„cce,s = 1/^^- 



where the ampHtude gain of the NLA is g - 4 and the ex- 
cess noise is e = 0.002. Similar to the results in jzsll . one 
can find that the maximum admissible losses is increased by 
20 logjQ g by using a NLA with gain g, which is equivalent to 

increase the maximum transmission distance by ^"'02'°"^ krn 
in fiber channel. This result does not depends on the value 
of Psuccess- Even for a more realistic probability of success, 
the NLA increase the maximum transmission distance in the 
same way. To test the efficiency for different values of g, the 
secret key rate for the modified four-state CVQKD protocol 
with a NLA with gain ^ = 2, 3, 4 is compared with that of the 
original protocol, as shown in Fig.H] 




Losses (dB) 



FIG. 4: (color online) The lower bound of the secret key rate for the 
modified four-state CVQKD protocol with a NLA R^^ia, T, e) for 
g = 2, 3, 4 and that of the original protocol without a NLA R(a, T, e) 
against the losses in dB. In the simulations, Va = 2a^ = 0.25, e = 
0.002, /3 = 0.8, and />,„„.„,, = I/g^ 

The maximal tolerable excess noise e^ax for the modified 
four-state CVQKD protocol by using a NLA with gain g and 
that of the original protocol is shown in Fig. |5] By using a 



NLA, the maximal tolerable excess noise can be increased, 
and this result does not depend on the value of Psllcce.^.^^■ 
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FIG. 5: (color online) Maximal excess noise for the modified and 
original four-state CVQKD protocol against losses in dB. In the sim- 
ulations, Va = 2a^ = 0.25,/? = 0.8, g = 4, and /'.„,„„,, = l/g". 



V. CONCLUSION 

In this paper, a modified four-state CVQKD protocol is pro- 
posed. The maximum transmission distance can be increased 
by the equivalent of 201ogj,)g dB of losses by using a noise- 
less linear amplifier before Bob's detection. The modified pro- 
tocol is also more robust against excess noise. 

Steady progress on the experimental realization of the NLA 
has been made in recent years jz/l - fsTll . A further work would 
be analyzing the gaps between practical implementations and 
theoretical description of NLA, and the effect of the imperfec- 
tion on the secure key rate. 
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